Unrated severityNVD Advisory· Published Sep 4, 2023· Updated Sep 30, 2024
User enumeration vulnerability in Roundcube Password Recovery Plugin
CVE-2023-3221
Description
User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the password recovery function to enumerate all users in the database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 1.2
- AlfnRU/Password Recovery Pluginv5Range: 1.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.